This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.


Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
File:                     c3PB_1VAPUeSNGST92n40DO-8Cw.mft (raw, json)
Hash identifier:          qmvRuHuDFmkmsl6votbis8KiREhM/tDB0lf6tqzj13c=
Subject key identifier:   BE:E0:59:5C:7F:02:B0:08:B5:E8:EA:61:DC:71:23:1C:7E:00:61:A6
Authority key identifier: 73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C
Certificate issuer:       /CN=7373c1ff55403d4792346493f769f8d033bef02c
Certificate serial:       019B533CE753657D343D72E109EACBD1F860
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
Manifest number:          1797
Signing time:             Thu 25 Dec 2025 02:00:58 +0000
Manifest this update:     Thu 25 Dec 2025 02:00:58 +0000
Manifest next update:     Fri 26 Dec 2025 02:00:58 +0000
Files and hashes:         1: NGx97u5kA3dUDgSnZsO_ai0a5zE.roa (hash: NM6MYaekH4qBVbHzQFehYG5HnPWSemWzqr91LDcaFoc=)
                          2: _VuqWh_9zLum_t2LzmiL-bKUpwU.roa (hash: fjTMbmjav2QqlRjLRKV5RKbBW9ZGH9k7F0uicD/W2jc=)
                          3: c3PB_1VAPUeSNGST92n40DO-8Cw.crl (hash: b8ItvBYH4zfnHXDsBMwIUtaGz17RCuqjRi/ZycljuYo=)
                          4: dPuUFhV8NKMg1Eyzpo3XKKBrSyQ.roa (hash: JZO95le0AT9qZyGk77wE0TYV+xtaUVyy4hxb89m5QEk=)
                          5: vaiZZBMW7gJmX2SSJ_GsXtMQsxA.roa (hash: s+4rmOMySoNQOi+H+sRt31xxTfChmW9KgSsCZve3tZg=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Fri 26 Dec 2025 01:21:29 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:9b:53:3c:e7:53:65:7d:34:3d:72:e1:09:ea:cb:d1:f8:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7373c1ff55403d4792346493f769f8d033bef02c
        Validity
            Not Before: Dec 25 02:00:58 2025 GMT
            Not After : Dec 26 02:00:58 2025 GMT
        Subject: CN=bee0595c7f02b008b5e8ea61dc71231c7e0061a6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:22:18:51:2f:2c:ad:d3:54:b7:43:d6:df:bb:
                    31:ee:6e:23:d9:0a:37:39:87:c3:eb:c8:fb:3b:e9:
                    51:0e:f5:6a:bc:78:d1:6e:48:d2:75:24:aa:a7:ad:
                    b8:c7:72:19:2a:e6:14:97:e7:73:7e:f7:4f:f8:2c:
                    dd:8a:31:a2:40:dd:4d:9f:02:06:34:49:d6:4c:ce:
                    14:99:88:38:b8:91:fe:f6:e6:d8:68:57:a9:16:e6:
                    03:2c:72:60:35:ba:09:7f:66:be:6e:f8:2c:50:04:
                    12:0c:c0:80:53:a2:10:9b:f3:be:7d:4d:78:10:c4:
                    2c:19:e1:fb:c0:a0:89:e9:a7:92:61:85:15:4a:53:
                    4a:3c:17:bd:44:b7:c2:4a:21:6f:63:0c:dd:66:3b:
                    1b:40:42:7f:ab:1e:be:b4:ef:49:67:80:cc:fb:01:
                    c0:0b:e0:d8:f7:c5:bf:1c:2c:c5:ff:d8:e1:67:3e:
                    37:d8:05:83:db:af:08:e7:6a:f4:20:d0:80:00:6d:
                    d7:d0:59:c5:d7:23:ca:e6:36:69:3b:dc:b0:39:6d:
                    e0:2f:0d:c8:72:e0:d4:c5:ec:13:03:ab:1d:fd:85:
                    46:61:74:d0:a7:b8:8e:72:c6:8d:13:5c:93:b9:bc:
                    ba:a9:a1:57:aa:9a:da:29:fa:b9:ad:25:38:a3:9f:
                    b3:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:E0:59:5C:7F:02:B0:08:B5:E8:EA:61:DC:71:23:1C:7E:00:61:A6
            X509v3 Authority Key Identifier:
                keyid:73:73:C1:FF:55:40:3D:47:92:34:64:93:F7:69:F8:D0:33:BE:F0:2C

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/c3PB_1VAPUeSNGST92n40DO-8Cw.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/48/1aff10-dd29-439f-8d23-bc9a5f6605fc/1/c3PB_1VAPUeSNGST92n40DO-8Cw.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         3a:6f:88:0c:e8:d0:72:4f:55:63:63:3f:ef:51:a1:73:c1:28:
         b6:9f:d9:c1:30:39:26:81:fd:1e:a4:0f:bd:74:b7:ae:f7:a0:
         a7:1d:05:53:24:cd:68:e4:eb:17:40:aa:db:c0:da:5a:ce:34:
         66:5d:07:72:30:5a:13:1e:3c:cd:19:2c:31:f5:dd:c6:e2:79:
         da:22:45:cc:80:44:b9:f8:3f:99:23:4f:f8:f5:77:bb:41:71:
         94:3f:30:21:8c:40:27:53:75:10:72:a4:08:90:4c:f5:b4:0a:
         13:a0:31:f2:dd:23:69:67:c2:13:d1:9d:4b:1b:73:49:3b:c8:
         6b:7c:23:86:f1:22:af:9a:da:74:84:68:f2:24:7b:06:59:ba:
         c6:72:88:89:fa:3d:2e:bc:35:a4:fd:42:1c:2e:3f:5c:9b:2b:
         0f:0c:b1:fe:85:99:fd:59:b9:17:40:d3:8d:bb:df:11:0b:6f:
         11:0c:5a:44:57:3b:99:f8:f4:12:e3:81:df:64:28:bc:5c:ca:
         84:cd:ed:a7:25:fc:cb:74:1e:1e:db:16:68:b0:6c:ff:b2:75:
         e1:b3:97:58:09:9c:e0:a5:86:15:56:06:4e:85:78:91:f1:93:
         7d:2e:8e:ba:71:48:0c:2e:99:dc:4f:0f:f8:6d:27:21:29:a2:
         8b:f6:7f:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Dec 25 05:13:01 2025 by rpki-client